CyberScoop

Cisco Talos’ research on ARToken builds on what’s known about the related EvilTokens phishing-as-a-service.

The post This phishing kit looks more like BEC-as-a-service appeared first on CyberScoop.

The bulletin includes six NetScaler issues, but attention is centered on a high-severity flaw with similarities to earlier actively exploited bugs.

The post Citrix patches a new NetScaler flaw with echoes of CitrixBleed appeared first on CyberScoop.

DHS Secretary Markwayne Mullin has been floating the idea of adding back 600 CISA personnel after deep Trump administration cuts.

The post Trump budget boss Russell Vought open to re-staffing CISA appeared first on CyberScoop.

The Department of Homeland Security is bringing back a key cybersecurity information sharing effort with critical infrastructure, more than a year after the Trump administration shuttered an existing nerve center between government and private sector. The Alliance of National Councils for Homeland Operational Resilience – Critical Infrastructure program, first reported by CyberScoop in January, is meant […]

The post DHS to unveil replacement council for critical infrastructure cybersecurity appeared first on CyberScoop.

From outsourced labor to tiered pricing models, an inside look at how today's top ransomware threats operate less like rogue hackers and more like Fortune 500 companies.

The post How ransomware syndicates weaponize corporate-style organization appeared first on CyberScoop.

The bill empowers the FTC to create a registry for sellers of AI agent software certifying their privacy and cybersecurity protections.

The post Warner bill would create federally vetted list for secure, trustworthy AI agents appeared first on CyberScoop.

The ruling is a victory for election advocates who say the evidence overwhelmingly shows that voter fraud is rare and not tied to mail voting in general. 

The post Supreme Court approves mail-in ballots that arrive after Election Day  appeared first on CyberScoop.

Dissenting justices who criticized the ruling said it would have “seismic” implications for the Fourth Amendment.

The post Supreme Court delivers ‘major win’ for tech privacy in Chatrie ruling appeared first on CyberScoop.

With federal PQC deadlines set for 2030 and 2031, CISOs face a multi-year transformation program that most organizations have not yet started. The window for orderly execution is narrowing fast.

The post What the post-quantum executive order really demands of CISOs appeared first on CyberScoop.

The agency told CyberScoop the tool was a pilot that didn’t meet their needs. Members of Congress say it was accessed for hundreds of active cases. 

The post ATF cancels controversial commercial geolocation contract appeared first on CyberScoop.

The new rules would overhaul national emergency systems to protect against hijacking and update federal security review rules for undersea cables providers

The post FCC passes new cybersecurity rules for emergency systems, undersea cables appeared first on CyberScoop.

Provisions setting up federal voter lists for each state and restricting mail ballots through USPS were declared unconstitutional.

The post Federal court rules Trump election-focused executive order illegal appeared first on CyberScoop.

The phone-cracking firm broke off from its deal with Russia, but Citizen Lab said that didn’t stop authorities from surveilling Andrey Pivovarov.

The post Russia uses Cellebrite to break into human rights activist’s phone, even after cancellation of contract appeared first on CyberScoop.

Nathan Austad, who sold access to compromised accounts through a criminal storefront, is the third and final defendant sentenced in the 2022 breach

The post Minnesota man known as ‘Snoopy’ sentenced in DraftKings hack appeared first on CyberScoop.

Six weeks of undetected access through a compromised VPN exposes why patching isn't a solution for the organizations already breached.

The post Why patch directives only go so far appeared first on CyberScoop.

Mandiant detailed the incident in a blog post Wednesday, but it’s unclear who was behind it or if they managed to get broad visibility into the victim’s internal traffic.

The post Malicious hackers exploit Cisco zero-day for highest access level at communications service provider appeared first on CyberScoop.

Microsoft, with law enforcement and industry partners, disrupted more than 200 command and control servers for Amadey and StealC, often used in conjunction.

The post In a first, a court takedown goes after two cybercrime tools at once appeared first on CyberScoop.

A diffuse landscape, fruitful targets, companies not stepping up, AI’s influence and flagging U.S. government efforts all figure into a shifting threat.

The post Open-source security is posing challenges governments can’t easily solve appeared first on CyberScoop.

lso Tuesday, the Treasury Department took action against the same Cambodian company, Huione Group, and affiliates.

The post Justice Department seizes infrastructure used by cyber scam and criminal marketplace appeared first on CyberScoop.

Abdellah Belmili allegedly ran two black-market websites selling stolen financial credentials and custom-built phishing kits targeting major American banks, federal prosecutors say.

The post Algerian man charged with running two cybercrime marketplaces appeared first on CyberScoop.